agentfootprint 11.3.0 → 11.5.0

package/dist/esm/mcp/replay.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"replay.js","sourceRoot":"","sources":["../../../src/mcp/replay.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuEG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAuF5C,yEAAyE;AACzE,MAAM,CAAC,MAAM,aAAa,GAAsB,MAAM,CAAC,MAAM,CAAC;IAC5D,MAAM,EAAE,eAAe;IACvB,KAAK,EAAE,IAAI,GAAG,EAAqB;CACpC,CAAC,CAAC;AAEH,MAAM,QAAQ,GAAwB,IAAI,GAAG,CAAkB,CAAC,gBAAgB,EAAE,eAAe,CAAC,CAAC,CAAC;AACpG,MAAM,KAAK,GAAwB,IAAI,GAAG,CAAgB,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC;AAEnF;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAgB,EAAE,KAAa;IACjE,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC;IAChD,MAAM,IAAI,GAAG,IAAI,iBAAiB,CAAC,GAAG,KAAK,cAAc,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,EAAE,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC,CAAC;IAC1E,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACpF,MAAM,KAAK,GAAG,IAAI,GAAG,EAAqB,CAAC;IAC3C,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC5B,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC;QAC1D,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAClD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;gBAAE,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,+BAA+B,CAAC,CAAC;YAC9E,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,MAAM,WAAW,GACf,GAAG,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IACpF,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,MAAM;QACN,KAAK;QACL,GAAG,CAAC,WAAW,KAAK,SAAS,IAAI,EAAE,WAAW,EAAE,CAAC;KAClD,CAAC,CAAC;AACL,CAAC;AAED,oEAAoE;AACpE,MAAM,iBAAiB;IACQ;IAA7B,YAA6B,KAAa;QAAb,UAAK,GAAL,KAAK,CAAQ;IAAG,CAAC;IAE9C,gFAAgF;IAChF,MAAM,CACJ,KAAc,EACd,EAAU,EACV,OAAsC;QAEtC,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACxE,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QAC/B,CAAC;QACD,MAAM,MAAM,GAAG,KAA0C,CAAC;QAC1D,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;gBACtC,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBAC3B,IAAI,CAAC,MAAM,CAAC,EAAE,EAAE,uBAAuB,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;gBACtF,CAAC;YACH,CAAC;QACH,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,CAAC,KAAc;QACnB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,KAAwB,CAAC;QACtF,OAAO,IAAI,CAAC,MAAM,CAAC,SAAS,EAAE,qCAAqC,CAAC,CAAC;IACvE,CAAC;IAED,IAAI,CAAC,KAAc,EAAE,IAAY;QAC/B,MAAM,EAAE,GAAG,UAAU,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC;QAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;QACxD,MAAM,EAAE,GAAG,IAAI,GAAG,EAAiB,CAAC;QACpC,IAAI,KAAK,CAAC,EAAE,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;gBAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,qCAAqC,CAAC,CAAC;YAC7F,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,EAAwB,EAAE,CAAC;gBAClD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;oBACjD,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,EAAE,qCAAqC,CAAC,CAAC;gBACjE,CAAC;gBACD,EAAE,CAAC,GAAG,CAAC,IAAqB,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;YACtE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;QAC5C,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC,CAAC;IAChE,CAAC;IAED,aAAa,CAAC,KAAc;QAC1B,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,eAAe,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;QACnE,MAAM,EAAE,QAAQ,EAAE,GAAG,QAAQ,CAAC;QAC9B,IACE,OAAO,QAAQ,KAAK,QAAQ;YAC5B,QAAQ,CAAC,MAAM,IAAI,CAAC;YACpB,QAAQ,CAAC,MAAM,IAAI,GAAG;YACtB,CAAC,UAAU,CAAC,QAAQ,CAAC,EACrB,CAAC;YACD,OAAO,QAAQ,CAAC;QAClB,CAAC;QACD,OAAO,IAAI,CAAC,MAAM,CAChB,wBAAwB,EACxB,gEAAgE,CACjE,CAAC;IACJ,CAAC;IAED,MAAM,CAAC,EAAU,EAAE,MAAc;QAC/B,MAAM,IAAI,SAAS,CAAC,GAAG,IAAI,CAAC,KAAK,GAAG,EAAE,YAAY,MAAM,GAAG,CAAC,CAAC;IAC/D,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,WAA8B;IACxD,IAAI,WAAW,CAAC,MAAM,KAAK,gBAAgB;QAAE,OAAO,IAAI,CAAC;IACzD,KAAK,MAAM,KAAK,IAAI,WAAW,CAAC,KAAK,CAAC,MAAM,EAAE;QAAE,IAAI,KAAK,CAAC,EAAE,CAAC,GAAG,CAAC,SAAS,CAAC;YAAE,OAAO,IAAI,CAAC;IACzF,OAAO,KAAK,CAAC;AACf,CAAC;AAaD,MAAM,QAAQ,GAAiB,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,CAAC;AACnE,+FAA+F;AAC/F,MAAM,YAAY,GAAiB,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAC;AAEtF;;;;GAIG;AACH,MAAM,UAAU,cAAc,CAAC,IAAa,EAAE,WAA8B;IAC1E,IAAI,WAAW,CAAC,MAAM,KAAK,eAAe,IAAI,WAAW,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC;IAChG,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,QAAQ,CAAC;IACzD,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,YAAY,CAAC;IAClD,IAAI,OAAgB,CAAC;IACrB,IAAI,CAAC;QACH,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,QAAQ,CAAC;IACtF,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC1C,MAAM,MAAM,GAAI,OAAyC,CAAC,MAAM,CAAC;IACjE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,YAAY,CAAC;IAC3C,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,MAGjC,CAAC;IACF,MAAM,EAAE,WAAW,EAAE,GAAG,WAAW,CAAC;IACpC,OAAO;QACL,IAAI,EAAE,MAAM;QACZ,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,EAAE,IAAI,EAAE,CAAC;QACzC,UAAU,EAAE,WAAW,KAAK,SAAS,IAAI,UAAU,CAAC,IAAI,EAAE,WAAW,CAAC;KACvE,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,OAAgB;IAClC,OAAO,QAAQ,CAAC,OAAO,CAAC,IAAK,OAAyC,CAAC,MAAM,KAAK,YAAY,CAAC;AACjG,CAAC;AAED,iGAAiG;AACjG,SAAS,UAAU,CAAC,IAAa,EAAE,QAAgB;IACjD,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3F,MAAM,GAAG,GAAI,IAA0C,CAAC,QAAQ,CAAC,CAAC;IAClE,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;AACnD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AA6BD,kGAAkG;AAClG,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,aAAa,CAAC,KAAK,CAAC,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,MAAM,CACpB,WAA8B,EAC9B,MAAoB,EACpB,OAAmB;IAEnB,IAAI,MAAM,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;QAC/B,6EAA6E;QAC7E,OAAO,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,eAAe,CAAC;IACtE,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACzF,8EAA8E;IAC9E,IAAI,KAAK,EAAE,OAAO,KAAK,IAAI,IAAI,CAAC,WAAW,CAAC,WAAW,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7F,OAAO,mBAAmB,CAAC;IAC7B,CAAC;IACD,MAAM,KAAK,GAAG,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;IACtC,IAAI,OAAO,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAClC,OAAO,MAAM,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,OAAO,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,cAAc,IAAI,KAAK,EAAE,EAAE,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QAC5E,OAAO,MAAM,CAAC,EAAE,EAAE,EAAE,aAAa,EAAE,EAAE,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,UAAU,IAAI,WAAW,CAAC,MAAM,KAAK,eAAe,EAAE,CAAC;QAC1E,OAAO,MAAM,CAAC,EAAE,EAAE,EAAE,eAAe,EAAE,OAAO,EAAE,0BAA0B,EAAE,EAAE,KAAK,CAAC,CAAC;IACrF,CAAC;IACD,OAAO,OAAO,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC;AACrE,CAAC;AAED,MAAM,eAAe,GAAmB,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;AACxE,MAAM,aAAa,GAAmB,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;AAClG,MAAM,aAAa,GAAmB,MAAM,CAAC,MAAM,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,eAAe,EAAE,CAAC,CAAC;AAClG,MAAM,mBAAmB,GAAmB,MAAM,CAAC,MAAM,CAAC;IACxD,MAAM,EAAE,KAAK;IACb,QAAQ,EAAE,qBAAqB;CAChC,CAAC,CAAC;AAEH,SAAS,MAAM,CAAC,UAAiC,EAAE,YAAqB;IACtE,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,GAAG,UAAU,EAAE,GAAG,CAAC,YAAY,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;KAC1F,CAAC;AACJ,CAAC;AAED,wEAAwE;AAExE;;;;;;GAMG;AACH,MAAM,OAAO,eAAe;IAClB,OAAO,GAAG,KAAK,CAAC;IAChB,OAAO,GAAG,KAAK,CAAC;IAExB,IAAI,CAAC,MAAyB;QAC5B,IAAI,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;aACzC,IAAI,MAAM,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;IACrD,CAAC;IAED,IAAI,MAAM;QACR,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,SAAS,CAAC;QACnC,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC;IAC3C,CAAC;CACF;AAOD;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,OAAO,aAAa;IAcH;IAbb,QAAQ,GAAG,CAAC,CAAC;IACb,aAAa,GAAG,KAAK,CAAC;IACtB,iBAAiB,GAAG,KAAK,CAAC;IAC1B,SAAS,CAAqB;IAC9B,OAAO,CAAuC;IAC9C,OAAO,CAA0B;IACjC,kBAAkB,GAAG,KAAK,CAAC;IAEnC;;;;OAIG;IACH,YAAqB,EAAmB,EAAE,OAAgB;QAArC,OAAE,GAAF,EAAE,CAAiB;QACtC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC;IACnD,CAAC;IAED,6CAA6C;IAC7C,OAAO;QACL,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC;IACrB,CAAC;IAED,2DAA2D;IAC3D,mBAAmB;QACjB,IAAI,CAAC,aAAa,GAAG,IAAI,CAAC;IAC5B,CAAC;IAED;;;OAGG;IACH,QAAQ;QACN,IAAI,CAAC,iBAAiB,GAAG,IAAI,CAAC;IAChC,CAAC;IAED,iEAAiE;IACjE,eAAe,CAAC,MAAc;QAC5B,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC;IAC1B,CAAC;IAED,sEAAsE;IACtE,QAAQ;QACN,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,IAAI,CAAC,OAAO,GAAG,UAAU,CAAC;IAC5D,CAAC;IAED,8FAA8F;IAC9F,MAAM,CAAC,OAAoB,EAAE,UAAmB;QAC9C,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO;QACvC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,kBAAkB,GAAG,UAAU,CAAC;IACvC,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAED;;;;;;OAMG;IACH,IAAI,SAAS;QACX,OAAO,IAAI,CAAC,aAAa,IAAI,CAAC,IAAI,CAAC,iBAAiB,IAAI,IAAI,CAAC,qBAAqB,CAAC,CAAC;IACtF,CAAC;IAED,mFAAmF;IACnF,IAAY,qBAAqB;QAC/B,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,CAAC;QAC9B,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,CAAC;IAC7F,CAAC;IAED,IAAI,OAAO;QACT,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IAED,IAAI,UAAU;QACZ,OAAO,IAAI,CAAC,kBAAkB,CAAC;IACjC,CAAC;CACF;AAED,gEAAgE;AAChE,SAAS,UAAU,CAAC,IAAY;IAC9B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACrC,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAChC,IAAI,IAAI,GAAG,IAAI,IAAI,CAAC,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC;IACjE,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/dist/esm/mcp/replayUnavailable.d.ts

@@ -0,0 +1,55 @@
+/**
+ * replayUnavailable — when a connection cannot keep the `'app-authorized'`
+ * contract, a call under it is refused BEFORE it is sent, and the error says why.
+ *
+ * Pattern: a readiness rule + one typed refusal.
+ * Role:    Under `'app-authorized'`, a call that genuinely lacked an answer and
+ *          then fails is raised as "may have run" (`callLifetime.ts`). That
+ *          rests on two things the library must ESTABLISH for every call,
+ *          never assume:
+ *
+ *   1. ITS REQUEST IS MATCHED to the call, by the call's private marker, taken
+ *      at the transport's `send` (`callMarker.ts`, `requestLedger.ts`).
+ *      - `'requests-unwatched'`: the library cannot watch this transport's
+ *        `send` at all (stdio, or a transport that refuses the wrap).
+ *      - `'request-unmatched'`: a request reached `send` without its call's
+ *        marker (an SDK that rebuilt the params and dropped `_meta`), so it
+ *        cannot be tied to any call.
+ *   2. ITS ANSWER IS SEEN: the JSON-RPC response to the request's id, read as
+ *      it arrives. This is checked once the connection is initialized: the
+ *      `initialize` answer must have passed the library's observer.
+ *      - `'answers-unobserved'`: it did not. An MCP SDK whose `connect`
+ *        REPLACES the transport's `onmessage` handler instead of keeping it
+ *        (SDK 1.10's `Protocol.connect` does) leaves the observer out.
+ *
+ * Without either, a request the server accepted and never answered would reach
+ * the caller as a plain timeout: the strict contract, silently weakened. So the
+ * call is refused instead, and nothing is sent. `'compatibility'` asks none of
+ * this and keeps its behaviour.
+ */
+/** Why a call under `'app-authorized'` was refused before it was sent. */
+export type McpReplayUnavailableReason = 'requests-unwatched' | 'answers-unobserved' | 'request-unmatched';
+/**
+ * A tool call refused before it was sent, because this connection cannot keep
+ * the `'app-authorized'` replay contract (`reason`). Nothing reached the server.
+ * Names the server and the tool, never an argument.
+ */
+export declare class McpReplayUnavailableError extends Error {
+    readonly reason: McpReplayUnavailableReason;
+    readonly server: string;
+    readonly tool: string;
+    readonly code: "ERR_MCP_REPLAY_UNAVAILABLE";
+    /** Nothing was sent: the refusal came before the request left the client. */
+    readonly sent: false;
+    constructor(reason: McpReplayUnavailableReason, server: string, tool: string);
+}
+/**
+ * Why a connection cannot take a call under `'app-authorized'` before anything
+ * is sent — `undefined` when it can. `ledger` is the connection's request
+ * ledger: absent when the library could not watch the transport's requests.
+ * A request that reaches the transport without its marker is refused there, by
+ * the ledger (`'request-unmatched'`).
+ */
+export declare function unavailableBeforeSending(ledger: {
+    readonly answersObserved: boolean;
+} | undefined): McpReplayUnavailableReason | undefined;

package/dist/esm/mcp/replayUnavailable.js

@@ -0,0 +1,74 @@
+/**
+ * replayUnavailable — when a connection cannot keep the `'app-authorized'`
+ * contract, a call under it is refused BEFORE it is sent, and the error says why.
+ *
+ * Pattern: a readiness rule + one typed refusal.
+ * Role:    Under `'app-authorized'`, a call that genuinely lacked an answer and
+ *          then fails is raised as "may have run" (`callLifetime.ts`). That
+ *          rests on two things the library must ESTABLISH for every call,
+ *          never assume:
+ *
+ *   1. ITS REQUEST IS MATCHED to the call, by the call's private marker, taken
+ *      at the transport's `send` (`callMarker.ts`, `requestLedger.ts`).
+ *      - `'requests-unwatched'`: the library cannot watch this transport's
+ *        `send` at all (stdio, or a transport that refuses the wrap).
+ *      - `'request-unmatched'`: a request reached `send` without its call's
+ *        marker (an SDK that rebuilt the params and dropped `_meta`), so it
+ *        cannot be tied to any call.
+ *   2. ITS ANSWER IS SEEN: the JSON-RPC response to the request's id, read as
+ *      it arrives. This is checked once the connection is initialized: the
+ *      `initialize` answer must have passed the library's observer.
+ *      - `'answers-unobserved'`: it did not. An MCP SDK whose `connect`
+ *        REPLACES the transport's `onmessage` handler instead of keeping it
+ *        (SDK 1.10's `Protocol.connect` does) leaves the observer out.
+ *
+ * Without either, a request the server accepted and never answered would reach
+ * the caller as a plain timeout: the strict contract, silently weakened. So the
+ * call is refused instead, and nothing is sent. `'compatibility'` asks none of
+ * this and keeps its behaviour.
+ */
+/** The fixed sentence each reason reads as. Never an argument, a header or an answer. */
+const BECAUSE = {
+    'requests-unwatched': "the library cannot watch this transport's requests, so it cannot match a request to its call",
+    'answers-unobserved': "this connection's answers do not pass the library's observer: the MCP SDK replaced the " +
+        "transport's message handler when it connected",
+    'request-unmatched': "the request reached the transport without its call's marker: the MCP SDK rebuilt the " +
+        "request's params",
+};
+/**
+ * A tool call refused before it was sent, because this connection cannot keep
+ * the `'app-authorized'` replay contract (`reason`). Nothing reached the server.
+ * Names the server and the tool, never an argument.
+ */
+export class McpReplayUnavailableError extends Error {
+    reason;
+    server;
+    tool;
+    code = 'ERR_MCP_REPLAY_UNAVAILABLE';
+    /** Nothing was sent: the refusal came before the request left the client. */
+    sent = false;
+    constructor(reason, server, tool) {
+        super(`mcpClient[${server}]: the call to '${tool}' was not sent. The 'app-authorized' replay ` +
+            `policy needs each request matched to its call and each answer seen, and ` +
+            `${BECAUSE[reason]}.`);
+        this.reason = reason;
+        this.server = server;
+        this.tool = tool;
+        this.name = 'McpReplayUnavailableError';
+    }
+}
+/**
+ * Why a connection cannot take a call under `'app-authorized'` before anything
+ * is sent — `undefined` when it can. `ledger` is the connection's request
+ * ledger: absent when the library could not watch the transport's requests.
+ * A request that reaches the transport without its marker is refused there, by
+ * the ledger (`'request-unmatched'`).
+ */
+export function unavailableBeforeSending(ledger) {
+    if (ledger === undefined)
+        return 'requests-unwatched';
+    if (!ledger.answersObserved)
+        return 'answers-unobserved';
+    return undefined;
+}
+//# sourceMappingURL=replayUnavailable.js.map

package/dist/esm/mcp/replayUnavailable.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"replayUnavailable.js","sourceRoot":"","sources":["../../../src/mcp/replayUnavailable.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;AAQH,yFAAyF;AACzF,MAAM,OAAO,GAAyD;IACpE,oBAAoB,EAClB,8FAA8F;IAChG,oBAAoB,EAClB,yFAAyF;QACzF,+CAA+C;IACjD,mBAAmB,EACjB,uFAAuF;QACvF,kBAAkB;CACrB,CAAC;AAEF;;;;GAIG;AACH,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAMvC;IACA;IACA;IAPF,IAAI,GAAG,4BAAqC,CAAC;IACtD,6EAA6E;IACpE,IAAI,GAAG,KAAc,CAAC;IAE/B,YACW,MAAkC,EAClC,MAAc,EACd,IAAY;QAErB,KAAK,CACH,aAAa,MAAM,mBAAmB,IAAI,8CAA8C;YACtF,0EAA0E;YAC1E,GAAG,OAAO,CAAC,MAAM,CAAC,GAAG,CACxB,CAAC;QARO,WAAM,GAAN,MAAM,CAA4B;QAClC,WAAM,GAAN,MAAM,CAAQ;QACd,SAAI,GAAJ,IAAI,CAAQ;QAOrB,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,MAAyD;IAEzD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,oBAAoB,CAAC;IACtD,IAAI,CAAC,MAAM,CAAC,eAAe;QAAE,OAAO,oBAAoB,CAAC;IACzD,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/esm/mcp/requestLedger.d.ts

@@ -1,48 +1,73 @@
 /**
  * requestLedger — which dispatched tool call an MCP request belongs to, so the
- * retry series that sends it files its attempts into THAT call's run; and when
- * the MCP SDK cancels a request, so the series sending it stops.
+ * retry series that sends it files its attempts into THAT call's run; when the
+ * MCP SDK cancels a request, so the series sending it stops; and whether the
+ * request's JSON-RPC answer arrived.
  *
  * Pattern: a per-connection ledger + the SDK transport's `send`, watched in place.
  * Role:    The middle of the evidence seam (`tools/requestEvidence.ts` is its
  *          door). The retry series runs inside the transport's `fetch`, which
  *          the MCP SDK calls with a serialized body and nothing else — no tool
- *          call, no run. Three hops carry the call down to it, each by an
- *          identity the hop already holds:
+ *          call, no run. Three hops carry the call down to it:
  *
- *   1. call → params    `issue`: the MCP tool keys its ticket by the request's
- *                       params OBJECT. The SDK puts that very object into the
- *                       JSON-RPC message it hands the transport.
- *   2. params → id      the watched `send` finds the ticket by `message.params`
- *                       and keys it by the JSON-RPC `id` the SDK assigned, until
- *                       that send settles.
+ *   1. call → marker    `issue`: the MCP tool gets a library-private marker and
+ *                       puts it in its request's `_meta` (`callMarker.ts`). It
+ *                       survives an SDK that copies the params.
+ *   2. marker → id      the watched `send` takes the marker out of the message
+ *                       — the server receives the bytes it always did — and
+ *                       keys the call by the JSON-RPC `id` the SDK assigned.
  *   3. id → series      `claim`: the series reads the `id` back out of the body
  *                       it is about to send.
  *
  * CANCELLATION DOES NOT WAIT ON ATTRIBUTION. Every `tools/call` in flight gets
- * an entry, ticket or not, and the SDK says when it gives a request up: it sends
- * `notifications/cancelled` naming the request's id — on its own timeout, or
- * when the call's signal fires — through this same `send`. The ledger aborts
- * that request's series there and then, so a request nobody waits for is never
- * asked again, even when its params could not be matched to a call.
+ * an entry, matched or not, and the SDK says when it gives a request up: it
+ * sends `notifications/cancelled` naming the request's id — on its own
+ * timeout, or when the call's signal fires — through this same `send`. The
+ * ledger aborts that request's series there and then, so a request nobody waits
+ * for is never asked again, even when it could not be matched to a call.
  *
- * Nothing is added to the wire: the request the server receives is
- * byte-identical, and the SDK's own options keep their meanings. Ids are the
- * client's, one ledger per connection, so concurrent calls — and concurrent
- * runs sharing one client — can never claim each other's request. A request
- * that is not a `tools/call` (a `tools/list`, a notification, a response)
- * claims nothing.
+ * Under `'app-authorized'` (`strict`), two more things hold:
+ *   - A `tools/call` that reaches `send` without a marker this ledger issued
+ *     and has not used is REFUSED there (`replayUnavailable.ts`,
+ *     `'request-unmatched'`): its answer could not be tied to any call, so it
+ *     is never sent rather than guessed at.
+ *   - Each matched request's answer is AWAITED, by its id: the connection's
+ *     incoming messages are observed for the JSON-RPC response to it. A 202, or
+ *     a stream, is not that answer. The watch ends when the answer arrives,
+ *     when the SDK cancels the request, when the call settles (found by its
+ *     marker, never by its params object) or when the connection closes —
+ *     never when only the HTTP send finished, since a 202 or a stream can still
+ *     carry the answer later.
+ *
+ * Whether the answers are observed at all is established once, at
+ * initialization: the `initialize` answer must pass the observer
+ * (`answersObserved`). An SDK whose `connect` replaces the transport's
+ * `onmessage` instead of keeping it leaves the observer out, and a call under
+ * `'app-authorized'` is then refused before it is sent (`replayUnavailable.ts`).
+ *
+ * Ids are the client's, one ledger per connection, so concurrent calls — and
+ * concurrent runs sharing one client — can never claim each other's request. A
+ * request that is not a `tools/call` (a `tools/list`, a notification, a
+ * response) claims nothing.
  *
  * `send` is installed as an OWN property of the transport instance — the same
  * object, its own `send` bound to it, so a transport class with `#private`
  * fields works as it always did. Assigning `send` again afterwards THROWS: a
  * send that bypassed the ledger would quietly lose every call's attempts.
  *
+ * Each matched `tools/call` also gets ONE `RequestReplay` (`replay.ts`), the
+ * facts its series, this ledger and its call share: the series' claim hands it
+ * over by the request's id, the call reads it from the entry it was issued
+ * (`IssuedCall`), which outlives the connection's close. The
+ * series writes what HTTP showed; this ledger writes whether the JSON-RPC
+ * answer arrived; the call writes how it settled.
+ *
  * What it does NOT do: retry, wait, or decide anything. The series is the one
  * retry owner; this only tells it whose attempts it is making, and when the SDK
  * has stopped waiting for them.
  */
 import type { RequestEvidenceSink } from '../tools/requestEvidence.js';
+import { RequestReplay } from './replay.js';
 /** One call's claim on the request it sends. */
 export interface RequestTicket {
     /** Where the request's attempts are filed. */
@@ -56,23 +81,71 @@ export interface ClaimedRequest {
     readonly ticket?: RequestTicket;
     /** Fires when the MCP SDK cancels this request (`notifications/cancelled`). */
     readonly cancelled: AbortSignal;
+    /** What this request's series and its call share (`replay.ts` · `RequestReplay`). */
+    readonly replay: RequestReplay;
+}
+/** How a connection's ledger is set up. */
+export interface RequestLedgerOptions {
+    /** The client's name, which a refusal names. */
+    readonly server: string;
+    /** The `'app-authorized'` policy is in force: see the module note. */
+    readonly strict: boolean;
 }
-/** Per connection: the tickets issued and not yet sent, and the requests being sent. */
+type JsonRpcId = string | number;
+/** The request a call's marker was matched to. */
+export interface MatchedRequest {
+    readonly id: JsonRpcId;
+    readonly replay: RequestReplay;
+}
+/**
+ * One call, from `issue` until it settles: the marker it sends, and the
+ * request matched to it once one was. The call holds this entry itself, so
+ * what it reads does not depend on the ledger still holding it.
+ */
+export interface IssuedCall {
+    readonly marker: string;
+    readonly ticket?: RequestTicket;
+    /** Set once, by the watched `send`: a marker matches ONE request. */
+    readonly request?: MatchedRequest;
+}
+/** Per connection: the calls issued and not yet settled, the requests being sent, the answers awaited. */
 export declare class RequestLedger {
-    /** Issued, not yet sent — keyed by the request's params object. Collected with it. */
+    private readonly options;
+    /** Every call issued and not yet settled — keyed by its marker. */
     private readonly issued;
-    /** Tickets a request was bound to. */
-    private readonly bound;
     /** Every `tools/call` sent and not yet settled — keyed by its JSON-RPC id. */
     private readonly sending;
+    /** Matched requests whose JSON-RPC answer is awaited (`strict` only) — by id. */
+    private readonly awaiting;
+    private initializeId;
+    private initializeAnswered;
+    private markers;
     private calls;
     private unboundNamed;
-    /** The call about to send `params` files its attempts through `ticket`. */
-    issue(params: object, ticket: RequestTicket): void;
-    /** Whether a request the transport sent was bound to `ticket`. */
-    wasBound(ticket: RequestTicket): boolean;
+    constructor(options?: RequestLedgerOptions);
+    /**
+     * A call is about to send its request: its entry, whose `marker` the call
+     * puts in the request's `_meta` (`callMarker.ts` · `markParams`). `ticket`
+     * is where its attempts are filed, when the call carries the run's evidence
+     * port.
+     */
+    issue(ticket?: RequestTicket): IssuedCall;
+    /** `call` settled: forget it, and stop awaiting its request's answer. */
+    settle(call: IssuedCall): void;
+    /** The connection closed: nothing it sent is awaited, and no call is pending, any more. */
+    close(): void;
+    /**
+     * Whether this connection's answers pass the observer: the `initialize`
+     * answer did. Read once the connection is initialized.
+     */
+    get answersObserved(): boolean;
     /** How many `tools/call` requests the watched transport has sent — matched to a call or not. */
     get toolCallsSent(): number;
+    /**
+     * @internal How many entries the ledger holds: calls issued and not settled,
+     * requests being sent, answers awaited. Zero once every call settled.
+     */
+    get retained(): number;
     /** `true` the first time it is asked, then never again: an unmatched request is named once per connection. */
     firstUnbound(): boolean;
     /**
@@ -80,8 +153,17 @@ export declare class RequestLedger {
      * original bound to the instance itself. Returns the SAME object — or
      * `undefined` when it has no `send` to watch or refuses the property, and
      * then nothing is watched and no call should expect its attempts filed.
+     *
+     * Its incoming messages are watched too: an `onmessage` set before the
+     * client connects, which the current MCP SDK's `Protocol.connect` keeps and
+     * calls before its own dispatch. Whether it was kept is known once the
+     * `initialize` answer has, or has not, passed it (`answersObserved`).
      */
     watch<T extends object>(transport: T): T | undefined;
+    /** Observe incoming messages before whatever handled them already — never instead of it. */
+    private watchMessages;
+    /** One incoming message: the `initialize` answer, or the answer to an awaited request. */
+    private observe;
     /**
      * The `tools/call` request `body` carries, while its send runs — its ticket
      * when a call issued one, and the signal its cancellation fires. `undefined`
@@ -90,8 +172,9 @@ export declare class RequestLedger {
     claim(body: unknown): ClaimedRequest | undefined;
     /** One message through the watched transport. */
     private send;
-    /** Register a `tools/call` in flight, with the ticket its params were issued — if any. */
-    private bind;
-    /** The SDK gave a request up: stop the series still sending it. */
+    /** The `initialize` request: its answer is the one that proves the observer is in place. */
+    private noteInitialize;
+    /** The SDK gave a request up: stop the series still sending it, and stop awaiting its answer. */
     private cancelIfAsked;
 }
+export {};